← Back to Skills Marketplace
567
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install passive-income-monitor
Description
Monitors and summarizes earnings from bandwidth nodes, decentralized storage, DeFi yields, and staking with alerts for drops or offline status.
Usage Guidance
This package looks like documentation for a CLI monitor but contains no executable scripts or installation instructions in the bundle — that mismatch is the main red flag. Before installing or enabling this skill: (1) verify the source and obtain the actual tool code (install.sh and passive-income-monitor.sh) from a trusted repository; (2) inspect any scripts you install, especially any that accept wallets, keys, or write to your home config; never put private keys into the tool's config — use read-only addresses or API tokens with minimal scope; (3) be cautious with webhooks: only configure webhook URLs you control/trust to avoid leaking financial data; (4) if you want the agent to call the tool automatically, restrict that behavior until you confirm the tool's code and network destinations; and (5) prefer a skill that includes its code or an explicit, auditable install mechanism rather than an instruction-only entry that references missing files.
Capability Analysis
Type: OpenClaw Skill
Name: passive-income-monitor
Version: 1.0.1
The skill bundle is classified as suspicious due to its handling of sensitive data and powerful network capabilities. It requires passing API keys and wallet addresses as command-line arguments and stores them in a configuration file, which can expose them to other processes or insecure file permissions. The skill also supports sending alerts to arbitrary webhook URLs and optionally uses Node.js for on-chain data, both of which are high-risk capabilities that could be exploited if the underlying scripts (not provided) are vulnerable. While the `SKILL.md` itself does not contain malicious prompt injections, it describes a tool with significant attack surface.
Capability Assessment
Purpose & Capability
The SKILL.md describes a shell tool (passive-income-monitor.sh), an install.sh, and OpenClaw integration; however the skill bundle contains no code files or install instructions. The registry entry claims install via 'clawhub install' and manual install.sh, yet no install spec or code is present — meaning the skill as published cannot actually provide the promised monitoring functionality. Required binaries and env vars are listed in prose (curl, jq, bash) but not enforced or declared in metadata.
Instruction Scope
Instructions are generally scoped to monitoring tasks (calling public APIs, local RPC, writing config in ~/.config/passive-income-monitor, exporting CSVs, posting webhooks). Those actions are consistent with the stated purpose. However the SKILL.md explicitly mentions the agent can call the tool proactively during heartbeats and that alerts may POST to arbitrary webhook URLs — this raises a potential data-exfil risk if the agent is given unchecked access or misconfigured webhooks. Also the instructions assume the presence of local scripts and access to RPC endpoints and wallet/validator identifiers stored in config, which could expose sensitive data if private keys or privileged endpoints are used.
Install Mechanism
There is no install spec in the published skill (instruction-only), but the README instructs users to run 'clawhub install passive-income-monitor' or 'bash install.sh'. That is inconsistent: the package doesn't include install.sh or any script to install. This mismatch makes it unclear how an agent or user would obtain the binaries the instructions expect, and it is suspicious that the README prescribes installation steps that cannot be executed from the bundle.
Credentials
The skill declares no required environment variables or primary credential, which is reasonable for a passive monitor. The SKILL.md does mention optional API keys (e.g., Storj) and webhook URLs, but these are not declared in requires.env. The absence of declared env vars combined with instructions to add API keys in config is an inconsistency to be aware of. The commands example use wallet addresses (public) and RPC endpoints, which are expected for this domain — but the documentation does not warn about never storing private keys in the config, which would be a security risk.
Persistence & Privilege
The skill does not request always-on presence (always:false) and does not declare system-wide privileges. It writes its own config under ~/.config/passive-income-monitor and alert logs there — this is normal for a CLI tool. The note that the OpenClaw agent can call the tool during heartbeats is a capability the user should consider enabling or disabling, but autonomous invocation by itself is the platform default and not an immediate red flag.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install passive-income-monitor - After installation, invoke the skill by name or use
/passive-income-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Fixed SKILL.md to accurately reflect initial release features, commands, and configuration for version 1.0.0.
- Clarified supported platforms, requirements, and alert methods.
- Improved usage documentation with command examples and example outputs.
- Ensured privacy and local data storage are clearly stated in the notes section.
Metadata
Frequently Asked Questions
What is Passive Income Monitor?
Monitors and summarizes earnings from bandwidth nodes, decentralized storage, DeFi yields, and staking with alerts for drops or offline status. It is an AI Agent Skill for Claude Code / OpenClaw, with 567 downloads so far.
How do I install Passive Income Monitor?
Run "/install passive-income-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Passive Income Monitor free?
Yes, Passive Income Monitor is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Passive Income Monitor support?
Passive Income Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Passive Income Monitor?
It is built and maintained by mariusfit (@mariusfit); the current version is v1.0.1.
More Skills